$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3776020d-59a1-3de4-89cd-a55f5939bd22.roa File: 3776020d-59a1-3de4-89cd-a55f5939bd22.roa (raw, json) Hash identifier: NCmHa2wA7tHwGhRlDH4XAixkIApUa0AUgVl/DZc7zhE= Subject key identifier: DA:D4:1A:7F:FA:F7:8C:49:EC:CB:07:CD:F5:D9:48:AE:98:C8:61:25 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D4B1DEC6CF51F67066A60 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3776020d-59a1-3de4-89cd-a55f5939bd22.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 35.130.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:4b:1d:ec:6c:f5:1f:67:06:6a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=3ef21d36-b2fa-4e16-afab-a00b002b1d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:5c:3b:e0:b5:2f:58:03:63:c2:cd:e4:9b: 4c:05:37:26:18:04:0c:36:bb:aa:a2:17:88:24:25: 1f:92:d6:d1:fa:f4:3d:e7:67:03:de:49:ee:9b:14: 44:e5:4b:1d:f9:c6:86:3e:3d:e7:8c:18:37:44:d5: 6d:e9:b3:e4:ac:40:a9:d8:73:f6:ae:18:24:db:eb: 7e:72:e3:73:7d:71:a2:b0:a7:79:14:29:e2:fa:08: 94:79:e2:05:a4:92:02:3e:17:fc:9c:03:13:ea:a8: 32:fb:2c:ff:2b:a9:21:12:1c:44:dc:1c:6a:55:bf: 74:83:16:67:f9:5e:7b:a8:99:24:e7:e8:0a:cb:5f: a4:27:87:39:6e:ab:b7:74:de:21:e0:02:c6:4b:ba: 30:ec:87:71:d0:63:e2:10:71:7c:04:a9:3e:f8:54: 3a:17:69:d5:9f:8a:e4:a5:62:6e:97:95:a8:98:c8: c8:a5:7d:6a:79:97:89:77:5d:27:38:4b:eb:23:47: e4:e6:ce:30:72:e9:ba:27:bc:79:71:cb:c5:36:6a: 2e:6a:ea:a7:68:06:db:a6:92:68:94:01:27:ba:af: 5f:24:b9:b0:4b:f7:57:29:67:3f:96:5b:ff:b8:f1: 02:3b:50:e1:d8:fe:3f:7a:f1:97:10:a6:bc:57:da: 18:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D4:1A:7F:FA:F7:8C:49:EC:CB:07:CD:F5:D9:48:AE:98:C8:61:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3776020d-59a1-3de4-89cd-a55f5939bd22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 35.130.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b1:2c:ef:c6:79:c6:5a:6c:88:93:97:a8:cf:28:b5:d7:11: 6a:fa:8d:b5:d1:a4:fa:fb:19:a7:29:8a:93:01:ee:18:44:cf: b4:f5:2d:af:c3:a9:96:45:97:26:3c:d3:8f:bf:36:06:9e:c9: 1f:dd:36:30:fd:af:70:e6:41:13:23:ef:4e:58:f9:00:43:b0: 9d:69:0e:51:41:2f:3d:e0:f5:fe:df:93:c2:cd:14:db:c8:e5: be:ae:a2:72:37:83:62:b3:19:2c:03:86:f3:ff:ba:77:20:4a: 09:bb:84:59:77:10:7b:8b:a9:b9:db:a3:83:4a:03:38:41:b6: 6c:6d:cd:6c:f9:94:f5:eb:9c:ba:b2:b1:ba:7a:ad:00:a3:e2: da:61:84:25:c0:7e:53:8f:9f:32:e3:be:6c:b4:78:a0:37:ef: 77:67:db:9b:cc:5f:db:91:d4:20:e4:b4:51:63:34:9a:aa:a3: 5c:17:67:db:f2:53:ed:f7:f8:6a:89:46:c2:b3:41:84:99:1a: 51:2e:cd:94:f9:9b:ce:44:d1:b1:48:1d:84:f2:13:1e:74:67: 3b:1d:f1:eb:4f:ff:a3:80:a9:88:16:ff:13:04:89:78:b9:4d: 25:cc:cc:bc:0f:88:34:aa:71:98:94:25:82:db:d8:45:be:ec: 1d:56:c0:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHUsd7Gz1H2cGamAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk M2VmMjFkMzYtYjJmYS00ZTE2LWFmYWItYTAwYjAwMmIxZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GpcO+C1L1gDY8LN5JtMBTcmGAQMNruqoheI JCUfktbR+vQ952cD3knumxRE5Usd+caGPj3njBg3RNVt6bPkrECp2HP2rhgk2+t+ cuNzfXGisKd5FCni+giUeeIFpJICPhf8nAMT6qgy+yz/K6khEhxE3BxqVb90gxZn +V57qJkk5+gKy1+kJ4c5bqu3dN4h4ALGS7ow7Idx0GPiEHF8BKk++FQ6F2nVn4rk pWJul5WomMjIpX1qeZeJd10nOEvrI0fk5s4wcum6J7x5ccvFNmouauqnaAbbppJo lAEnuq9fJLmwS/dXKWc/llv/uPECO1Dh2P4/evGXEKa8V9oYOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrUGn/694xJ7MsHzfXZSK6YyGElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzc3NjAyMGQtNTlhMS0z ZGU0LTg5Y2QtYTU1ZjU5MzliZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI4KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuxLO/GecZabIiTl6jPKLXXEWr6jbXRpPr7GacpipMB7hhEz7T1La/D qZZFlyY804+/NgaeyR/dNjD9r3DmQRMj705Y+QBDsJ1pDlFBLz3g9f7fk8LNFNvI 5b6uonI3g2KzGSwDhvP/uncgSgm7hFl3EHuLqbnbo4NKAzhBtmxtzWz5lPXrnLqy sbp6rQCj4tphhCXAflOPnzLjvmy0eKA373dn25vMX9uR1CDktFFjNJqqo1wXZ9vy U+33+GqJRsKzQYSZGlEuzZT5m85E0bFIHYTyEx50Zzsd8etP/6OAqYgW/xMEiXi5 TSXMzLwPiDSqcZiUJYLb2EW+7B1WwJY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:06:18 2025 by rpki-client